Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
File:                     17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json)
Hash identifier:          vKiQLqMfJA7ufUZE5YKD0me9iQcGjmHl9EAzU3MgEEQ=
Subject key identifier:   27:52:26:E6:20:67:A1:3E:71:5A:07:34:E5:B5:22:24:19:A3:FA:1E
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584A9BCB720165CDA7F038BA0080
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     46616
IP address blocks:        208.114.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:72:01:65:cd:a7:f0:38:ba:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=2ff45981-c557-4770-80d5-b118d86a93be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:91:d0:59:7d:5b:46:31:29:1b:8a:2e:8d:
                    5b:d5:63:71:3e:27:04:08:40:9e:20:ed:21:6b:44:
                    cd:56:f4:8d:57:83:9b:d5:c5:45:88:8d:70:d2:f7:
                    75:80:cc:ab:c2:9f:41:87:29:3c:20:43:a6:bd:23:
                    9d:73:d2:6c:60:60:6d:30:d6:9b:5d:06:a3:c5:47:
                    42:93:96:84:cb:63:63:90:26:61:c1:cd:57:8f:3a:
                    fc:8a:59:98:0b:f3:2e:a9:a5:1f:2e:03:93:9d:49:
                    52:c4:53:2c:eb:42:e0:cd:f9:95:3b:9e:a4:e5:ef:
                    a6:c3:d0:9b:fb:07:cc:c3:ba:96:d5:5c:26:23:0e:
                    b7:c5:02:23:bf:cd:a8:0a:c9:a6:52:ab:ff:b5:62:
                    ef:e5:27:b7:9c:0f:c3:7a:42:43:e4:8b:41:a0:df:
                    bf:2d:f6:87:d0:91:64:2c:a9:ca:62:b1:2a:f0:6d:
                    18:fe:4e:63:19:93:ba:a9:69:02:f2:ce:33:54:ac:
                    41:18:15:c9:2c:f9:78:c2:c2:7b:77:a3:6b:c8:d9:
                    6c:f3:e4:b5:36:6b:07:ab:bc:90:54:5f:0f:b7:8a:
                    86:db:bc:7a:3c:73:77:75:27:97:78:80:a8:97:80:
                    37:5e:c1:51:42:e0:df:29:7a:c5:38:0c:23:be:01:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:26:E6:20:67:A1:3E:71:5A:07:34:E5:B5:22:24:19:A3:FA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:60:3c:c9:42:a8:be:3b:31:ed:4c:93:c7:a7:f3:58:57:b4:
         fa:11:c8:b3:68:19:f7:8f:fd:a8:4c:82:58:58:58:93:80:71:
         7d:c9:15:9d:32:16:90:68:d3:4d:bd:85:41:04:82:59:e8:da:
         cc:5a:f7:c0:49:2f:0d:32:85:57:37:82:83:3d:d1:36:17:6f:
         f8:e7:cb:5b:76:55:93:12:9b:b5:fb:75:2a:bd:94:65:56:55:
         bd:f4:6a:13:99:c2:fe:f2:74:99:fa:45:f2:23:5d:6c:75:1d:
         2c:9d:9c:c5:84:55:07:94:a9:e1:0f:a6:1c:e5:7f:06:60:e7:
         cb:cb:dc:14:79:d5:83:70:1f:4e:c6:2f:6a:a8:53:85:a4:80:
         b5:0a:04:49:94:c6:5e:17:c5:31:f8:35:b8:3e:3b:4b:67:1a:
         2d:fe:e4:c1:48:37:3b:25:c5:75:fa:65:7e:90:82:4c:ea:c4:
         f8:05:9f:79:27:ac:44:43:d0:14:d3:91:f7:86:06:33:6f:f1:
         a7:ac:ab:44:d7:2f:58:dc:15:a0:71:2e:2e:76:fe:1f:67:2e:
         98:b8:b1:c4:81:09:84:c7:d8:d1:2e:60:65:e5:37:1f:c4:a5:
         aa:86:74:36:47:57:b3:df:74:ce:a9:b1:65:09:2f:ae:68:9a:
         cd:ac:02:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 17:44:43 2025 by rpki-client